Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:movie_decoder:6.5.3:*:*:*:*:*:*:*

part: a version: 6.5.3 update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductMovie Decoder (b188ea7c-ace0-526e-9486-4858479c89e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4897 vulnerable 2026-06-08 05:02:53.150908 Details available
Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse executable file in the installer directory.
Published: 2012-10-05T17:00:00.000Z
Updated: 2024-08-06T20:50:17.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4294 vulnerable 2026-06-08 04:55:19.712252 Details available
The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.
Published: 2010-12-06T21:00:00.000Z
Updated: 2024-08-07T03:43:14.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2628 vulnerable 2026-06-08 04:51:29.493122 Details available
The VMnc media codec in vmnc.dll in VMware Movie Decoder before 6.5.3 build 185404, VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, and VMware ACE 2.5.x before 2.5.3 build 185404 on Windows does not properly handle certain small heights in video content, which might allow remote attackers to execute arbitrary code via a crafted AVI file that triggers heap memory corruption.
Published: 2009-09-08T22:00:00.000Z
Updated: 2024-08-07T05:59:56.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1565 vulnerable 2026-06-08 04:51:23.967426 Details available
vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted HexTile-encoded video chunks that trigger heap-based buffer overflows, related to "integer truncation errors."
Published: 2010-04-12T18:00:00.000Z
Updated: 2024-08-07T05:20:33.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1564 vulnerable 2026-06-08 04:51:23.960659 Details available
Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Windows, allows remote attackers to execute arbitrary code via an AVI file with crafted video chunks that use HexTile encoding.
Published: 2010-04-12T18:00:00.000Z
Updated: 2024-08-07T05:20:34.307Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0199 vulnerable 2026-06-08 04:51:08.284835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.